critical9.8
CVE-2023-26689
An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request.
Impact
An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cs-Cart | Cs-Cart Multivendor | Version 4.16.1 |